2026-03-30: Fortinet FortiClient EMS is under active attack through CVE-2026-21643

Show Notes - 2026-03-30

Stories Covered

• Today:
• Fortinet FortiClient EMS SQL Injection Under Active Exploitation (CVE-2026-21643) [Critical Alerts]
• F5 BIG-IP Flaw Upgraded to Critical RCE, Now Exploited in Wild [Critical Alerts]
• Citrix NetScaler Vulnerability Under Exploitation [Critical Alerts]
• ShinyHunters Claims European Commission Breach [Ransomware & Extortion]
• Jackson County Sheriff's Department Hit by Ransomware [Ransomware & Extortion]
• CareCloud EHR Breach [Ransomware & Extortion]
• Apple Adds ClickFix Warning to macOS Terminal [Business & Infrastructure Threats]
• Iranian Hackers Breach FBI Director's Personal Email (CVE Not Applicable) [Business & Infrastructure Threats]
• Tax-Themed Phishing Campaigns Deliver RMM Tools [Business & Infrastructure Threats]
• BreachForums v5 Hacked Days After Revival [Business & Infrastructure Threats]
• Microsoft Pulls KB5079391 Windows Update Over Install Issues [Windows / AD Security]
• White House Mobile App Contains Multiple Critical Security Flaws [General Security News]
• FCC Foreign Router Ban Criticized as Industrial Policy [General Security News]
• AI-Assisted Malware Development Reaches Operational Maturity [General Security News]
• China-Linked Clusters Target Southeast Asian Government [General Security News]
• Smart Slider 3 WordPress Plugin File Read Vulnerability (CVE-2026-3098) [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-21643, CVE-2026-3098

Indicators of Compromise

IP Addresses: 3.5.1.34

Read the full brief